Scope
Reference
NMRNO.2025.008
Description
The National Museum of the Royal Navy (NMRN) has reviewed its current cyber security stack and is looking to implement further measures to protect its systems, data and people. Solutions to be implemented should complement current security measures and enhance our visibility, understanding and response to cyber threats within the IT environment.
The NMRN is reviewing its supply arrangements to ensure that it is aware of what the market currently has to offer and is in a position to select a supplier that is best able to deliver the National Museum's requirements over the next 3 - 5 years.
The tender is split into three lots which can be seen in the ITT documents, with associated evaluation criteria. The response is to be completed both on the ITT and associated Appendix 1 response form.
Note- Lot 1 has a cost of £180k as per the ITT document.
Bidders are welcome to bid on individual lots or all lots.
Clarifications are to be send to tenders@nmrn.org.uk
Total value (estimated)
- £235,000 excluding VAT
- £282,000 including VAT
Above the relevant threshold
Contract dates (estimated)
- 30 September 2025 to 29 September 2028
- Possible extension to 29 September 2030
- 5 years
Description of possible extension:
3 Year Initial Contract, with option to extend for further 2 years with satisfactory performance.
Main procurement category
Services
Contract locations
- UK - United Kingdom
Not the same for all lots
CPV classifications are shown in Lot sections, because they are not the same for all lots.
Lot 1. Lot 1- Managed Detect and Response (MDR)
Description
The NMRN is seeking a Managed Detect and Response (MDR) service to monitor activity across its IT estate and detect potential cyber threats. Full details in the ITT
Lot value (estimated)
- £177,000 excluding VAT
- £212,400 including VAT
CPV classifications
- 48700000 - Software package utilities
- 72000000 - IT services: consulting, software development, Internet and support
Same for all lots
Contract locations and contract dates are shown in the Scope section, because they are the same for all lots.
Lot 2. Email Security Solution
Description
The NMRN uses Microsoft 365 Exchange for email services and the solution will need to be able to support this. The email security solution should also integrate with other security solutions, such as EDR, NDR and identity security solutions to enhance visibility of threats and help inform detection and response. Current contract is due to end in October 2025.
Lot value (estimated)
- £38,000 excluding VAT
- £45,600 including VAT
CPV classifications
- 48700000 - Software package utilities
- 72000000 - IT services: consulting, software development, Internet and support
Same for all lots
Contract locations and contract dates are shown in the Scope section, because they are the same for all lots.
Lot 3. Lot 3- Microsoft 365 Identity Security Solution
Description
The NMRN uses Microsoft 365 services throughout the business. This includes, Exchange, Azure/Entra, Microsoft Teams, SharePoint and OneDrive, Dynamics 365, Power Platform and Power BI. Entra Single Sign On is also configured on a number of 3rd party services. The identity security solution to be implemented should support these services to help monitor and protect accounts against malicious activity and compromise.
Full details are in the ITT. Current contract concludes in October 2025.
Lot value (estimated)
- £20,000 excluding VAT
- £24,000 including VAT
CPV classifications
- 72000000 - IT services: consulting, software development, Internet and support
Same for all lots
Contract locations and contract dates are shown in the Scope section, because they are the same for all lots.
Participation
Particular suitability
Lot 1. Lot 1- Managed Detect and Response (MDR)
Lot 2. Email Security Solution
Lot 3. Lot 3- Microsoft 365 Identity Security Solution
Small and medium-sized enterprises (SME)
Submission
Enquiry deadline
8 August 2025, 12:00pm
Tender submission deadline
18 August 2025, 12:00pm
Submission address and any special instructions
All bids must be submitted to tenders@nmrn.org.uk before the stated deadline. To ensure your documents are received it is recommended to email and express your interest in this tender in advance. To understand who the NMRN are please see www.nmrn.org.uk
Tenders may be submitted electronically
Yes
Languages that may be used for submission
English
Award decision date (estimated)
12 September 2025
Award criteria
Lot 1. Lot 1- Managed Detect and Response (MDR)
| Name | Description | Type | Weighting |
|---|---|---|---|
| Please respond to the Appendix 1- Security Tender Questionnaire Lot 1 Tab-MDR Questionnaire | See Appendix 1 Document. |
Quality | 30% |
| Please provide a case study for the proposed MDR service from an existing deployment | Full details in the ITT |
Quality | 20% |
| • Describe how the proposed MDR service meets the criteria set out in Annex A, section 4. | Quality | 20% | |
| • Describe how the proposed MDR service supports the current requirements | Full Details in the ITT |
Quality | 15% |
| Please detail your OLA and SLA for the proposed service | Full details in the ITT |
Quality | 10% |
| • Please confirm your average threat detection and response times | Quality | 5% |
Lot 2. Email Security Solution
| Name | Description | Type | Weighting |
|---|---|---|---|
| Please respond to the Appendix 1- Security Tender Questionnaire- Lot 2 Tab - Email questionnaire | See Appendix 1 document for the relevant tab to complete. |
Quality | 30% |
| Describe how the proposed email security solution meets the criteria set out in Annex A | Full details in the ITT. |
Quality | 25% |
| Describe how the proposed email security solution supports the current requirements set out in Annex A | Full details in the ITT. |
Quality | 20% |
| Please confirm the solutions average threat detection and response times | Quality | 15% | |
| Please detail the reporting capabilities of the system. | Full details for this question in the ITT. |
Quality | 10% |
Lot 3. Lot 3- Microsoft 365 Identity Security Solution
| Name | Description | Type | Weighting |
|---|---|---|---|
| Please respond to the Appendix 1- Security Tender Questionnaire- Lot 3 Tab | See Appendix 1 for the relevant tab for this Criterion. |
Quality | 30% |
| Describe how the proposed identity security solution meets the criteria set out in Annex A | Please see the ITT for full information. |
Quality | 25% |
| Describe how the proposed identity security solution supports the current requirements set out in Annex A | Please see the ITT for full information. |
Quality | 20% |
| Please confirm the solutions average threat detection and response times | Please see the ITT for full information. |
Quality | 15% |
| Please detail the reporting capabilities of the system. | Please see the ITT for full information. |
Quality | 10% |
Other information
Conflicts assessment prepared/revised
Yes
Procedure
Procedure type
Open procedure
Documents
Associated tender documents
Appendix 1- Security Tender Questionnaire.xlsx
Appendix 1 for relevant tabs to complete for the Lot you are submitting for.
NMRN ITT [Open]- IT Security Solutions.docx
Main ITT Document.
Clarifications and Responses- IT Software Solutions Issue 1.pdf
Contracting authority
National Museum of the Royal Navy
- Public Procurement Organisation Number: PZYJ-5834-NBRM
Main Road (PP66), HM Naval Base Portsmouth
Portsmouth
PO1 3NH
United Kingdom
Region: UKJ31 - Portsmouth
Organisation type: Public authority - central government